Stack-based Buffer Overflow

A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

CVEs (4,077)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-43549 1Qualcomm 136Ar8035 Firmware Csr8811 FirmwareFastconnect 6700 Firmware+133 more Jun 17, 2026 Mar 4, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption while processing TPC target power table in FTM TPC.
CVE-2024-27571 1Libtor 1Lbt T300 T390 Firmware Jun 17, 2026 Mar 1, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 LBT T300-T390 v2.2.1.8 were discovered to contain a stack overflow via the ApCliSsid parameter in the makeCurRemoteApList function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POS...Show more LBT T300-T390 v2.2.1.8 were discovered to contain a stack overflow via the ApCliSsid parameter in the makeCurRemoteApList function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.Show less
CVE-2024-27570 1Libtor 1Lbt T300 T390 Firmware Jun 17, 2026 Mar 1, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 LBT T300-T390 v2.2.1.8 were discovered to contain a stack overflow via the ApCliSsid parameter in the generate_conf_router function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted PO...Show more LBT T300-T390 v2.2.1.8 were discovered to contain a stack overflow via the ApCliSsid parameter in the generate_conf_router function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.Show less
CVE-2024-27569 1Libtor 1Lbt T300 T390 Firmware Jun 17, 2026 Mar 1, 2024 N/A· v4 6.5 MEDIUM· v3 N/A· v2 LBT T300-T390 v2.2.1.8 were discovered to contain a stack overflow via the ApCliSsid parameter in the init_nvram function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request...Show more LBT T300-T390 v2.2.1.8 were discovered to contain a stack overflow via the ApCliSsid parameter in the init_nvram function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.Show less
CVE-2024-27568 1Libtor 1Lbt T300 T390 Firmware Jun 17, 2026 Mar 1, 2024 N/A· v4 6.5 MEDIUM· v3 N/A· v2 LBT T300-T390 v2.2.1.8 were discovered to contain a stack overflow via the apn_name_3g parameter in the setupEC20Apn function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST req...Show more LBT T300-T390 v2.2.1.8 were discovered to contain a stack overflow via the apn_name_3g parameter in the setupEC20Apn function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.Show less
CVE-2024-27567 1Libtor 1Lbt T300 T390 Firmware Jun 17, 2026 Mar 1, 2024 N/A· v4 6.5 MEDIUM· v3 N/A· v2 LBT T300- T390 v2.2.1.8 were discovered to contain a stack overflow via the vpn_client_ip parameter in the config_vpn_pptp function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted PO...Show more LBT T300- T390 v2.2.1.8 were discovered to contain a stack overflow via the vpn_client_ip parameter in the config_vpn_pptp function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.Show less
CVE-2024-1941 1Deltaww 1Cncsoft B Jun 17, 2026 Mar 1, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 Delta Electronics CNCSoft-B versions 1.0.0.4 and prior are vulnerable to a stack-based buffer overflow, which may allow an attacker to execute arbitrary code.
CVE-2024-27657 1Dlink 1Dir 823g Firmware Jun 17, 2026 Feb 29, 2024 N/A· v4 8.8 HIGH· v3 N/A· v2 D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the User-Agent parameter. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input, and possibly remote code e...Show more D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the User-Agent parameter. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input, and possibly remote code execution.Show less
CVE-2024-27656 1Dlink 1Dir 823g Firmware Jun 17, 2026 Feb 29, 2024 N/A· v4 8.8 HIGH· v3 N/A· v2 D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the Cookie parameter. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input, and possibly remote code execu...Show more D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the Cookie parameter. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input, and possibly remote code execution.Show less
CVE-2024-27655 1Dlink 1Dir 823g Firmware Jun 17, 2026 Feb 29, 2024 N/A· v4 8.8 HIGH· v3 N/A· v2 D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the SOAPACTION parameter. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input, and possibly remote code e...Show more D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the SOAPACTION parameter. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input, and possibly remote code execution.Show less
CVE-2023-50734 - - Jun 17, 2026 Feb 28, 2024 N/A· v4 9.0 CRITICAL· v3 N/A· v2 A buffer overflow vulnerability has been identified in PostScript interpreter in various Lexmark devices. The vulnerability can be leveraged by an attacker to execute arbitrary code.
CVE-2024-25751 1Tenda 1Ac9 Firmware Jun 17, 2026 Feb 26, 2024 N/A· v4 9.8 CRITICAL· v3 N/A· v2 A Stack Based Buffer Overflow vulnerability in Tenda AC9 v.3.0 with firmware version v.15.03.06.42_multi allows a remote attacker to execute arbitrary code via the fromSetSysTime function.
CVE-2024-1783 1Totolink 1Lr1200gb Firmware Jun 17, 2026 Feb 23, 2024 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 A vulnerability classified as critical has been found in Totolink LR1200GB 9.1.0u.6619_B20230130/9.3.5u.6698_B20230810. Affected is the function loginAuth of the file /cgi-bin/cstecgi.cgi of the component Web Interface....Show more A vulnerability classified as critical has been found in Totolink LR1200GB 9.1.0u.6619_B20230130/9.3.5u.6698_B20230810. Affected is the function loginAuth of the file /cgi-bin/cstecgi.cgi of the component Web Interface. The manipulation of the argument http_host leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-254574 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.Show less
CVE-2024-25756 1Tenda 1Ac9 Firmware Jun 17, 2026 Feb 22, 2024 N/A· v4 8.0 HIGH· v3 N/A· v2 A Stack Based Buffer Overflow vulnerability in Tenda AC9 v.3.0 with firmware version v.15.03.06.42_multi allows a remote attacker to execute arbitrary code via the formWifiBasicSet function.
CVE-2024-25753 1Tenda 1Ac9 Firmware Jun 17, 2026 Feb 22, 2024 N/A· v4 8.8 HIGH· v3 N/A· v2 Stack Based Buffer Overflow vulnerability in Tenda AC9 v.3.0 with firmware version v.15.03.06.42_multi allows a remote attacker to execute arbitrary code via the formSetDeviceName function.
CVE-2024-25748 1Tenda 1Ac9 Firmware Jun 17, 2026 Feb 22, 2024 N/A· v4 8.8 HIGH· v3 N/A· v2 A Stack Based Buffer Overflow vulnerability in tenda AC9 AC9 v.3.0 with firmware version v.15.03.06.42_multi allows a remote attacker to execute arbitrary code via the fromSetIpMacBind function.
CVE-2024-25746 1Tenda 1Ac9 Firmware Jun 17, 2026 Feb 22, 2024 N/A· v4 8.8 HIGH· v3 N/A· v2 Stack Based Buffer Overflow vulnerability in Tenda AC9 v.3.0 with firmware version v.15.03.06.42_multi allows a remote attacker to execute arbitrary code via the add_white_node function.
CVE-2024-23126 1Autodesk 9Advance Steel AutocadAutocad Architecture+6 more Jun 17, 2026 Feb 22, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 A maliciously crafted CATPART file when parsed CC5Dll.dll through Autodesk applications can be used to cause a Stack-based Overflow. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data...Show more A maliciously crafted CATPART file when parsed CC5Dll.dll through Autodesk applications can be used to cause a Stack-based Overflow. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.Show less
CVE-2024-23125 1Autodesk 9Advance Steel AutocadAutocad Architecture+6 more Jun 17, 2026 Feb 22, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 A maliciously crafted SLDPRT file when parsed ODXSW_DLL.dll through Autodesk applications can be used to cause a Stack-based Overflow. A malicious actor can leverage this vulnerability to cause a crash, read sensitive da...Show more A maliciously crafted SLDPRT file when parsed ODXSW_DLL.dll through Autodesk applications can be used to cause a Stack-based Overflow. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.Show less
CVE-2023-24334 1Tenda 1Ac23 Firmware Jun 17, 2026 Feb 21, 2024 N/A· v4 8.0 HIGH· v3 N/A· v2 A stack overflow vulnerability in Tenda AC23 with firmware version US_AC23V1.0re_V16.03.07.45_cn_TDC01 allows attackers to run arbitrary commands via schedStartTime parameter.

Previous 1...153154155...204 Next